| Posted: 06 July 2007 at 3:07pm | IP Logged
|
|
|
Installed HotLinkBlocker, works great... now real quick question, perhaps I am missing something here, but in the hotblocker config, I have set up LINK security on a published content directory on our IIS server which stores tons of wav's, gif's, etc. Config below:
################################################# # HotlinkBlocker Configuration file
# Version 1, 4, 0, 56
Signature= LinkExpires=3600 NotifyOrder=MEDIUM
[Protect] LINK /members/sound%20effects http://www.domainname.com
[ReferersBlackList] [ReferersWhiteList] [UserAgentsBlackList] [UserAgentsWhiteList]
This config prevents anyone from linking to any files contained in that folder, and if tried it redirects them to the main site index. Works great, now...
All I did was add a second trailing "/" and the file is obtainable.
For example: http://www.mydomain.com/members/sounds/test.wav will redirect to the site index when HB is turned on.
http://www.mydomain.com//members/sounds/test.wav is obtainable simply by adding the second trailing slash (which I found is able to be used infinatly, for example, http://www,mydomain.com/////////////members/sounds/test.wav will also allow the user to download the same exact file.
I guess my first question is, WHY is that possible?
|